CVE-2020-1908CWE-285

Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact…

published November 3, 2020

CVSS
—
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact with the WhatsApp application even after the phone was locked.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00291 · 20.4th percentile
Weakness
CWE-285 · Improper Authorization
Published
2020-11-03T19:15Z
EPSS history
Timeline
  • 03 NOV 19:15Z
    Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact…
    cvelistv5